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FRAGILITY  DATA  ANALYSIS  AND  TESTING 
GUIDELINES  FOR  ESSENTIAL  EQUIPMENT 
USED  IN  CRITICAL  FACILITIES 


1 INTRODUCTION 


Background 

The  necessity  for  critical  facilities  to  provide  post-earthquake 
recovery  services  requires  survival  not  only  of  the  building  structures* 
but  also  of  the  utility  and  lifeline  systems  which  support  the  functions 
most  needed  after  an  event.  Assuming  the  structure  will  survive,  the 
major  problem  Is  the  isolation  or  hardening  of  all  systems,  subsystems, 
equipment,  and  components  needed  to  support  the  essential  functions. 

Before  a decision  is  made  to  harden  or  Isolate  certain  equipment, 

It  is  necessary  to  determine  the  fragility  properties  of  the  equipment. 
Some  components  may  be  so  delicate  that  they  must  be  isolated,  while 
others  may  withstand  the  environment  with  no  degradation.  It  Is  pre- 
sently too  costly  and  otherwise  impractical  to  require  that  all  essen- 
tial equipment  of  critical  facilities  be  tested  for  fragility.  However, 
testing  of  related  off-the-shelf  equipment  has  been  done  for  the  assess- 
ment of  hardness  of  tactical  support  equipment  at  missile  sites.  A 
considerable  amount  of  experience  can  be  gained  from  the  analysis  of  the 
resulting  hardness  assessment  reports.  The  major  results  of  analyzing 
these  reports  are  recorded  in  this  work,  and  form  the  basis  for  pro- 
posing some  preliminary  specifications  and  guidelines  for  fragility 
testing  for  essential  equipment  of  critical  facilities. 


Purpose 


The  purpose  of  this  report  Is  to  present  preliminary  guidelines  and 
test  report  specifications  derived  from  analyzing  fragility  data  test 
results  of  the  type  of  equipment  used  in  essential  systems  of  critical 
Army  facilities. 


Outline  of  Report 


Chapter  2 presents  the  primary  results  of  this  work  In  the  form  of 
proposed  testing  and  test  report  specifications.  Other  guidelines 
provided  will  enable  the  test  engineer  to  categorize  failures  and 
Identify  problems  in  time  to  reschedule  testing  when  certain  typical 
test  results  are  encountered. 
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Chapter  3 analyzes  many  fragility  reports  from  which  the  specifi- 
cations In  Chapter  2 were  formed.  Data  were  collected  from  pertinent 
off-the-shelf  equipment  similar  to  the  type  of  equipment  found  in 
essential  systems  of  utilities  and  lifelines  of  critical  facilities. 
Appendix  A describes  the  fundamental  theoretical  principles  of  fragility 
testing  in  perspective  with  other  forms  of  destructive  testing  more 
familiar  to  engineers.  Appendix  B provides  a method  for  analyzing 
fragility  test  data  to  determine  probability  of  failure.  This  method 
was  applied  to  hypothetical  failure  data  to  establish  the  guidelines. 


2 PROPOSED  SPECIFICATIONS 


The  specifications  proposed  In  this  section  are  directed  toward 
improving  fragility  testing  and  test  report  procedures.  They  have  been 
assembled  from  an  analysis  of  failure  data  contained  in  the  Amy  Corps 
of  Engineers  Huntsville  Division's  technical  reports  on  SAFEGUARD  sys- 
tems testing;  however,  they  are  not  yet  complete.  Completion  would 
entail  the  generation  of  specifications  for  controlling  the  accuracy  of 
shock  environments  and  instrumentation  measurements,  and  for  providing 
guidelines  to  selecting  appropriate  shock  environments  for  various 
classes  of  equipment.  Ultimately,  specifications  will  be  completed  for 
testing,  analysis,  design,  and  procurement  of  essential  systems  and 
components. 


Definitions 


Test  Unit;  Lists  of  essential  equipment  are  usually  displayed 
according  to  systems,  subsystems,  and  components.  However,  for  a 
particular  test  setup  or  analysis,  it  Is  more  convenient  to  refer  to  a 
complete  unit  of  equipment.  A unit  is  defined  as  any  system,  subsystem, 
component,  or  combination  of  these  which  may  be  treated  independently, 
either  as  an  assembly  or  as  a detailed  part  with  a specific  function. 

For  example,  individual  valves  In  a piping  system  may  be  sufficiently 
rugged  to  avoid  testing  each  one.  Since  the  weakest  points  may  be  the 
joints  of  the  valves  and  the  piping.  It  may  be  desirable  to  test  or 
analyze  the  entire  piping  system  as  a unit.  The  size  of  a test  unit  Is 
limited  to  its  capability  of  being  subjected  to  a single  defined  shock 
environment;  i.e.,  a piping  system  of  a building  would  be  too  large  to 
test  the  entire  unit. 

Hardness;  A unit's  hardness  is  defined  as  its  probability  of 
failure  under  expected  environmental  loading  conditions. 

Fragility:  A unit's  fragility  is  defined  by  stating  the  value  of  a 
dependent  variable,  such  as  acceleration,  at  which  it  will  fall. 

Fragility  Envelope:  A fragility  envelope  is  determined  by  ex- 
pressing the  dependent  variable  descriptive  of  failure  as  a function  of 
frequency. 

Test  Capability:  Test  capability  is  the  capability  to  duplicate  a 
prescribed  shock  environment  fur  a test  unit  and  to  provide  instru- 
mentation for  monitoring  the  shock  environment  and  response  of  the  unit 
in  accordance  with  MIL-C-45662,  "Calibration  System  Requirements"  for 
instrumentation  standards. 

Test  Analysis  Capability:  Test  analysis  capability  is  the  capa- 
bility to  process  and  reduce  failure  data  and  to  calculate  the  proba- 
bility of  failure  of  a test  unit  under  prescribed  loading  conditions. 
This  operation  usually  requires  a computer  facility  and  personnel 
knowledgable  in  statistical  analysis. 
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Hardness  Assessment:  The  assessment  of  a unit's  hardness  is 
achieved  by  calculating  the  unit's  probability  of  failure  under  (pos- 
sibly numerous)  specified  shock  loading  conditions. 

Hardness  Assurance:  The  assurance  of  hardness  is  achieved  by 
reducing  the  probability  of  a unit's  failure  below  an  acceptable  value. 
This  can  be  accomplished  either  by  redesign  to  eliminate  failures  under 
a prescribed  shock  environment,  or  by  Isolating  the  unit  from  the 
prescribed  shock  environment. 

Test  Level : The  shock  environment  for  fragility  testing  is  usually 
define<r~as~a "shaped  shock  spectrum,  referred  to  as  the  100  percent 
level.  Tests  may  be  conducted  with  the  same  spectrum  shape,  but  with  a 
uniform  amplitude  change  in  parameters.  The  level  of  the  test  refers  to 
the  amplitude  of  a single  parameter  such  as  displacement,  velocity,  or 
acceleration,  which  can  be  used  for  comparison  with  the  100  percent 
level.  The  same  terminology  is  used  for  application  to  any  type  of 
shock  environment. 

Flaw:  A flaw  is  a fault  in  a unit  which  is  sensitive  to  one  or 
more  variables  such  as  acceleration,  velocity,  or  displacement.  The 
flaw  will  cause  the  unit  to  fail  if  one  of  these  variables  exceeds  a 
certain  limit. 

Flaw  Level  : The  lowest  limit  of  the  variable  which  will  cause  the 
unit  to  fail  Is  the  flaw  level;  thus,  if  the  test  level  exceeds  the  flaw 
level,  the  test  unit  will  fall. 

Consistent  Failure:  When  a failure  occurs  repeatedly  and  can  be 
predicted  at  a well-defined  test  level  value,  the  flaw  or  failure  is 
said  to  be  consistent.  A unit  will  exhibit  100  percent  probability  of 
failure  at  test  levels  at  or  above  this  well-defined  level,  and  the 
failure  will  be  caused  by  the  same  (consistent)  flaw.  Numerous  con- 
sistent failures  may  occur  simultaneously.  A fragility  envelope  can  be 
formed  from  flaw  levels  if  the  flaws  are  consistent. 

Independent  Failure:  When  a failure  occurs  erratically,  at  dif- 
ferent  levels  of  the  variables,  the  flaw  is  said  to  be  Independent.  A 
well-defined  fragility  envelope  cannot  be  formed  from  flaw  levels  if  the 
flaws  are  independent.  When  this  situation  occurs,  it  is  necessary  to 
consider  the  probability  of  failure  of  a unit  at  any  test  level. 

Qualifying  Failure:  A qualifying  failure  is  one  which  can  be 
corrected  almost'  Immediately,  or  which  has  a degrading  influence  not 
directly  affecting  the  unit's  function  or  that  of  any  other  interfacing 
unit. 


Lingering  Failure:  A lingering  failure  is  one  which  requires  an 
intolerable  time  delay  to  correct.  The  failure  may  occur  directly 
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within  the  test  unit,  or  a faulty  output  of  the  unit  may  cause  an 
Interfacing  system  to  malfunction. 


Applicability 

These  specifications  should  apply  whenever  testing  is  authorized 
for  components  of  essential  systems  and  functions  of  critical  facili- 
ties. Equipment  manufacturers  who  do  not  have  the  specified  testing 
capability  should  not  be  authorized  to  conduct  such  tests.  Likewise,  a 
statement  about  the  probability  of  a component's  failure  should  not  be 
requested  unless  the  test  analysis  capability  exists. 


Test  Report  Requirements 

Care  must  be  taken  to  insure  that  test  data  can  be  Interpreted  with 
a minimum  of  subjectivity.  If  test  capability  exists  and  authority 
has  been  granted  to  conduct  fragility  tests,  a complete  test  report 
should  be  required.  The  cost  of  such  a report  Is  expected  to  be  rela- 
tively small  compared  to  the  costs  of  equipment,  time,  and  labor.  A 
typical  report  should  Include  the  following: 

1.  Purpose.  Provide  a detailed  description  of  why  the  unit  must 
be  tested  and  what  results  are  considered  important. 

2.  Authorization.  Provide  the  authorizing  agency,  the  funding, 
and  the  time  schedule  restrictions. 

3.  Unit  Description.  Describe  the  unit  to  be  tested  in  terms  of 
where  or  how  it  fits  Into  a critical  system  or  subsystem,  and  what 
components  are  to  be  tested.  Describe  critical  Interfaces  with  other 
systems,  and  define  what  structural  or  functional  aspects  constitute 
failure. 

4.  Ambient  Conditions.  Describe  the  operating  conditions  under 
which  the  unit  must  be  tested,  including  such  information  as  pressures, 
temperatures,  flow  rates,  etc. 

5.  Loading  Requirements.  Loading  requirements  should  be  specified 
by  contract  before  testing  is  authorized.  The  required  100  percent  test 
level  should  be  recorded  as  specified,  usually  in  terms  of  shock  spec- 
trum. Variations  of  this  loading  for  special  conditions  should  be 
stated  in  detail. 

6.  Test  Machine  Description.  Describe  the  dynamic  capabilities 
of  the  testing  machine  In  terms  of  maximum  displacement,  velocity, 
acceleration,  frequency  range,  table  weight,  test  mass  weight,  or  any 
other  pertinent  specifications. 


7.  Method  of  Procedures.  Describe  all  testing  methods  and  all 
detailed  procedures  for  conducting  the  tests.  The  procedures  should  be 
recorded  as  testing  progresses.  Each  action  should  be  listed  on  a 
tabulated  form  so  that  events  can  be  read  in  chronological  order;  in 
particular,  all  anomalies,  failures,  and  corrective  actions  should  be 
described. 

8.  Test  Summary  Tabulation.  A standard  tabulation  format  should 
be  used  to  summarize  test  results.  This  format,  as  described  in  the 
next  section,  should  include  sufficient  information  to  assess  the 
hardness  of  the  unit  without  further  reference  to  detailed  methods  and 
procedures. 

9.  Appendix.  All  raw  test  data  should  be  shown  in  a tabular 
format. 


Test  Summary  Format 

The  purpose  of  the  test  sumnary  format  is  to  provide  a standard 
presentation  from  which  enough  significant  information  can  be  extracted 
to  facilitate  the  unit's  hardness  assessment.  Figure  1 illustrates  a 
suitable  format  and  typical  entries.  The  following  minimum  information 
should  be  provided. 

1.  Heading  information  should  include  a title,  description  of  the 
unit,  the  test  machine  used,  and  the  date  or  span  of  dates  over  which 
testing  was  conducted. 

2.  The  axis  or  axes  of  testing  must  be  identified. 

3.  The  tests  should  be  identified  by  number  in  chronological 
order. 

4.  The  loading  information  should  be  coded  for  reference  to  a time 
history,  shock  spectrum,  or  other  authorized  loading  requirement  shown 
elsewhere  in  the  report;  the  percent  of  full-scale  level  should  also  be 
shown. 

5.  A brief  description  of  every  failure  should  be  entered.  Cor- 
rective action  need  not  be  listed,  since  it  should  be  provided  else- 
where in  the  report. 

6.  The  test  engineer  should  enter  an  opinion  about  whether  the 
unit's  failure  is  qualifying  (Q)  or  lingering  (F).  When  there  is  suf- 
ficient doubt,  the  engineer  should  consult  an  expert. 


7.  The  test  engineer  should  enter  an  opinion  about  whether  the 
failure  is  consistent  (C)  or  independent  (I).  Again  consultation  with 
an  expert  may  be  necessary.  This  information  is  not  complete  until  the 


Figure  1.  Typical  test  summary  format. 


scheduled  testing  is  finished  and  the  types  of  failures  are  reviewed. 
Further  testing  may  be  recommended  if  Independent  failures  are  recognized. 

Hardness  Assurance  or  Assessment 

If  testing  will  be  conducted  by  the  unit's  manufacturer,  achieving 
hardness  assurance  may  be  possible,  since  in  this  case,  all  consistent 
failures  should  be  identified  and  eliminated  by  redesign,  and  the  unit 
retested  for  verification  of  hardness.  The  report  should  Include  the 
results  of  the  original  design's  test  if  the  unit  is  already  operational 
at  any  critical  facility.  Authorization  for  the  mass  production  and 
purchasing  of  hardened  units  must  not  be  automatically  assumed  by  a 
manufacturer,  since  further  contract  negotiations  will  be  necessary 
before  hardening  all  production  units. 

If  independent  failures  are  identified,  hardness  assurance  may  be 
difficult  or  impossible  to  achieve  with  available  time  and  funds.  In 
this  case  the  testing  facility  should  request  authority  for  more  ex- 
tensive testing  than  originally  planned.  The  goal  will  then  be  to 
collect  enough  test  data  to  provide  a reasonably  accurate  hardness 
assessment,  since  hardness  assurance  may  be  beyond  consideration.  If 
test  analysis  capability  for  hardness  assessment  does  not  exist  and 
independent  failures  occur,  the  hardness  assessment  and  calculation  of 
the  probability  of  failure  may  be  accomplished  later  if  a complete  and 
accurate  report  Is  provided. 

Guidelines  for  Selection  of  Test  Levels 


It  is  never  known  before  testing  whether  consistent  or  independent 
failures  (or  both)  will  occur  in  a hardness  test  program.  When  a con- 
sistent failure  occurs  at  or  below  the  expected  environment  level,  the 
probability  of  failure  is  100  percent.  Hence,  the  decision  must  be  made 
either  to  temporarily  condone  the  existence  of  the  flaw,  to  harden  the 
unit  by  eliminating  the  flaw,  or  to  isolate  the  unit  to  prevent  damage. 
When  independent  failures  occur,  attempts  to  harden  may  be  fruitless, 
and  isolation  of  the  unit  Impractical.  In  this  case,  the  probability  of 
failure  will  be  less  than  or  equal  to  100  percent,  and  it  is  usually 
advisable  to  collect  sufficient  test  data  to  enable  a reasonably  ac- 
curate calculation  of  the  probability  of  failure  at  appropriate  test 
levels. 

In  concept,  the  probability  of  failure  of  a unit  can  be  plotted  as 
a function  of  test  level,  as  shown  in  Figure  2.  It  is  convenient  (and 
recommended)  to  select  the  exponential  distribution  as  the  estimated 
shape  of  this  curve  for  many  units.  In  this  case,  the  mathematical 
relation  is  written  as 


1 - e" 


[Eq  1] 
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where  F(x)  ■ probability  of  failure 
x * test  level 

a - open  parameter,  to  be  determined  from  failure  data 


Figure  2.  Probability  of  failure. 

The  expected  environment  level  may  be  shown  on  this  plot  as  a 
vertical  line  at  the  appropriate  value  of  x.  By  plotting  a horizontal 
line  at  the  Intersection  of  the  environment  level  and  the  curve  for 
F(x),  the  probability  of  failure  can  be  stated.  In  Figure  2,  a 75 
percent  probability  of  failure  Is  Indicated  at  the  environment  level. 

If  an  established  criterion  dictates  that  the  probability  of  failure 
shall  not  exceed  25  percent,  this  will  be  represented  by  a second 
horizontal  line  at  F(x)  * 0.25,  Indicating  that  the  unit  has  a hardness 
level  somewhat  less  than  the  expected  environment  level  for  this  criterion. 

Selection  of  Teet  Levels 

It  should  be  obvious  from  Figure  2 that  an  Improved  value  of  a can 
be  estimated  If  test  levels  are  scheduled  so  that  somewhat  uniform 
values  of  F(x)  are  obtained  throughout  the  range  0 < F(x)  <1.  If  Eq  1 
Is  solved  for  test  level  In  terms  of  F,  the  result  is 

x 8 - j An  (1  - F).  [Eq  2] 

Hence,  If  a were  known,  Eq  2 could  be  used  (for  the  exponential  dis- 
tribution) to  soNe  for  optimum  test  levels  by  selecting  equal  Incre- 
ments of  F between  zero  and  unity.  Of  course,  a must  be  taken  from 
the  data  and  is  never  known  In  advance.  However,  It  can  be  seen  from 
Eq  2 that  a logarithmic  Increase  In  test  levels  would  lead  to  a more 
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efficient  and  accurate  estimate  of  a than  other  methods.  It  is  common, 
for  example,  to  increase  test  levels  In  equal  increments,  which  could  be 
much  less  efficient.  If  an  Investigator  knows  beforehand  what  dis- 
tribution function  he*  would  like  to  apply,  an  equation  like  Eq  2 could 
be  derived  to  show  what  variation  In  test  levels  he  should  use  for  best 
efficiency.  Such  prior  knowledge  is  rare,  however,  so  the  simple  ex- 
ponential distribution  and  the  logarithmic  increase  In  test  levels  Is 
recommended . 

A major  concern  Is  establishment  of  an  upper  test  level  bound.  It 
Is  never  known  beforehand  whether  the  full-scale  Input  shock  environment 
will  exceed  or  fall  below  the  unit's  required  probability  of  failure 
level.  The  most  accurate  calculation  of  open  parameters  (a,  for  the 
exponential  distribution)  Is  obtained  In  the  undesirable  case  when  there 
Is  a high  probability  of  failure  at  test  levels  less  than  or  equal  to 
the  full-scale  environmental  level.  Because  of  time  and  funding  limita- 
tions, testing  above  the  full  environmental  level  may  not  be  authorized. 
Therefore,  the  least  accurate  calculation  of  parameters  results  when 
there  is  a low  probability  of  failure  below  the  full  required  level. 

Numerous  hypothetical  studies  Indicate  that  failure  cannot  be 
predicted  accurately,  for  independent  failures,  unless  a unit  Is  tested 
throughout  the  full  range  for  0 < F < 1.  If  It  Is  necessary  to  test 
above  the  full  environmental  level  to  experience  more  failures  for  this 
purpose,  the  authority  must  be  granted  Individually.  Thus,  the  upper 
test  level  bound  will  be  a function  of  the  required  environmental  level, 
the  number  of  failures  experienced  In  testing  up  to  this  level,  and  the 
time  and  funds  available  to  test  above  this  level. 

It  has  also  been  observed  from  many  hypothetical  tests  that  ac- 
curacy In  estimating  the  parameters  Is  Increased  somewhat  If  testing  Is 
not  conducted  repeatedly  at  the  same  level.  That  Is,  for  a given  number 
of  tests,  accuracy  Is  Improved  by  testing  at  different  levels,  preferably 
In  the  range  where  failures  can  occur  at  least  50  percent  of  the  time. 

Number  of  Test  Levels 

The  accuracy  with  which  the  distribution  parameters  can  be  esti- 
mated will  also  Increase  as  the  number  of  tests  Increases.  Studying 
the  results  of  hypothetical  failure  tests  through  the  entire  proba- 
bility range  provides  a good  Indication  of  the  minimum  number  of 
tests  needed  to  obtain  a given  degree  of  accuracy.  To  accomplish 
this,  three  candidate  one-parameter  distributions  were  studied  In 
which  the  number  of  tests  In  the  range  0 < F < 1 was  varied  from 
7 to  100.  In  each  case,  100  trials  were  made;  l.e.,  100  trials  were 


*,lHe'i  is  used  throughout  this  report  to  represent  both  masculine  and 
feminine  genders. 


made  for  seven  test  levels  optimally  spaced  between  0 < F < 1,  and 
likewise  for  10»  15,  20,  30,  50,  75,  and  100  test  levels. 

The  distributions  used  were  the  exponential,  the  Pareto,  and  the 
limited  types.  These  yield  nonzero  probability  of  failure  only  for 
positive  values  of  the  test  level;  hence,  the  magnitude  of  the  test 
level  Is  the  Independent  variable.  The  corresponding  density  functions 
are  all  skewed  In  the  direction  of  Increasing  test  level.  The  exponen- 
tial and  Pareto  types  are  unlimited  In  that  the  probability  of  failure 
approaches  (but  never  quite  reaches)  100  percent  as  the  test  level  Is 
Increased.  The  limited  distribution  could  be  used  If  It  were  known  that 
100  percent  failure  was  certain  above  a given  level.  The  exponential 
and  limited  types  have  all  statistical  moments  (such  as  mean,  variance, 
skewness,  kurtosls,  and  higher  moments)  defined,  while  those  for  a 
Pareto  distribution  would  not  exist  above  a certain  order.  In  this 
reject,  a Pareto  distribution  Is  a special  case  of  a Cauchy  distri- 
bution being  nonzero  only  for  positive  values  of  test  levels.  These 
three  distributions  were  used  in  this  work  because  they  are  represen- 
tative of  numerous  one-parameter  distributions  a statistician  might 
select  from  for  application  to  fragility  data. 

The  value  of  the  single  parameter  a to  be  estimated  In  each  case 
was  normalized  to  unity.  For  simplicity,  the  measure  of  accuracy  of  the 
estimate  was  taken  as  the  coefficient  of  variation,  which  Is  the  ratio 
of  the  standard  deviation  of  the  estimate  to  the  value  of  the  estimate. 
The  standard  deviation  Is  a measure  of  absolute  error  of  the  estimate; 
hence,  this  ratio  Is  descriptive  of  the  relative  error  of  the  estimate. 
The  results  plotted  In  Figure  3 represent  averages  of  results  from  the 
three  distributions. 

In  Figure  3a,  a Is  predicted  with  some  positive  bias  when  the 
number  of  test  levels  Is  less  than  approximately  20.  The  biased  esti- 
mation of  parameters  often  occurs  In  statistical  problems,  and  can  be 
accounted  for  by  correcting  the  parameter  by  the  indicated  error.  When 
the  number  of  test  levels  exceeds  20,  however,  the  average  estimation  of 
a approaches  unity,  as  It  should. 

Figure  3b  Is  a plot  of  the  coefficient  of  variation  of  a,  and  shows 
the  manner  In  which  the  estimate  of  o Improves  as  the  number  of  tests  In 
the  full  probability  range  Is  Increased.  The  Interpretation  of  this 
accuracy  Is  demonstrated  best  by  an  example.  For  20  test  levels,  c * 
.392,  This  Implies  that  there  Is  68.4  percent  chance  that  the  actual 
value  of  a will  be  within  39.2  percent  of  the  estimated  value.  It  can 
be  seen  that  this  accuracy  Is  rather  poor.  Again,  for  100  test  levels, 
there  Is  68.4  percent  chance  that  the  actual  value  will  be  within 
16.0  percent  of  the  estimated  yalue.  Hence,  the  Improvement  of 
accuracy  Is  demonstrated  and  shown  as  a function  of  the  number  of 
tests,  optimally  spaced  between  0 < F < 1. 
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The  method  of  maximum  likelihood  was  used  to  obtain  the  above 
results.  Use  of  another  estimation  technique  might  possibly  Improve 
accuracy;  however,  It  Is  highly  unlikely  that  the  Improvement  would 
be  significant.  The  Important  conclusion  Is  that,  for  Independent 
failures,  a large  number  of  tests  must  be  conducted  on  a unit  before 
failure  can  be  predicted  with  reasonable  accuracy.  In  practice,  It 
will  be  difficult  to  select  test  levels  spaced  In  an  optimum  manner, 
and  time  and  funds  may  prohibit  testing  when  the  probability  of 
failure  Is  high.  Hence,  the  results  shown -In  Figure  3 tend  to  be 
optimistic,  and  additional  tests  will  generally  be  required  to  achieve 
the  same  accuracy  In  actual  cases. 


3 OBSERVED  FAILURE  INFORMATION 


Summary  of  SAFEGUARD  Failure .Data 

Two  different  procedures  for  hardness  assurance  testing  were 
Identified  In  the  SAFEGUARD  program.1  In  this  program  many  off-the- 
shelf  Items  of  support  equipment  were  tested  which  are  similar  to  those 
used  In  essential  systems  of  critical  facilities.  Even  though  the  test 
envelopes  for  SAFEGUARD  were  not  what  would  be  required  for  critical 
facilities,  the  experience  and  qualitative  results  should  be  directly 
applicable. 

The  method  used  for  most  units  Involved  testing  at  25  percent,  50 
percent,  75  percent,  and  100  percent  of  the  expected  shock  environment. 
The  second  method  was  used  exclusively  on  five  motor  control  centers, 
each  of  which  was  submitted  to  more  than  four  test  levels  at  and  below 
the  100  percent  level.  The  types  of  failures  recorded  In  each  group 
were  significantly  different. 

General  Equipment  Testa 

Fifty-eight  Independent  units  were  tested  under  the  first  method; 
of  these,  26  units  passed  all  levels  (45  percent),  while  two  units 
failed  all  levels  (3  percent). 

A total  of  968  tests  were  held  on  all  units,  often  In  orthogonal 
directions.  Tests  were  held  primarily  at  the  four  levels  mentioned 
above.  A few  tests  were  held  below  the  25  percent  level,  and  others 
were  held  as  high  as  the  140  percent  level.  A total  of  430  failures 
were  recorded.  Of  the  failures,  84  percent  could  be  repaired  Imme- 
diately, or  had  a degrading  effect  which  did  not  seriously  Impair  the 
unit's  function.  Such  failures  have  been  defined  previously  as  quali- 
fying—the  unit's  function  might  be  interrupted  momentarily,  but  normal 
function  can  continue  almost  Immediately.  The  remaining  16  percent  of 
the  failures  produced  lingering  effects  and  required  a significant 
amount  of  time  to  correct. 

Table  1 lists  the  percentage  of  failures  at  each  of  the  four  pri- 
mary test  levels,  together  with  the  percentage  of  qualifying  failures 
(Q),  and  the  percentage  of  lingering  failures  (F).  At  the  100  percent 
level,  for  example,  there  were  411  tests  yielding  225  failures  (54.7 
percent).  Of  the  failures,  33.3  percent  were  qualifying,  while  the 
remaining  21.4  percent  produced  lingering  effects. 


1 Subsystems  Hardness  Aaeuranae  Analysis,  HNDSP-73-161 -ED-R  (U.S. 
Army'  Corps  of  Engineers,  Huntsville  Division,  December  1974). 


Table  1 

Failure  Suninary  From  General  Equipment  Tests 


Full  Test 
Level 

No.  of 
Tests 

Combined 

Failures 

Qualifying 

Failures 

(Q) 

Lingering 

Failures 

(F) 

25* 

70 

5.7* 

5.7* 

0.0* 

50* 

163 

20.2* 

14.1* 

6.1* 

75* 

197 

37.1* 

31.5* 

5.6* 

100* 

411 

54.7* 

33.3* 

21.4* 

Motor  Control  Center  Teata 

Five  Independent  motor  control  centers  were  tested,  with  failures 
recorded  for  all  units. 

One  hundred  and  seventy- two  tests  were  held  at  numerous  test  levels 
in  three  orthogonal  axes;  an  average  of  34  tests  (11  in  each  axis)  was 
held  for  each  unit.  A total  of  92  failures  (53  percent)  was  recorded, 

22  (13  percent)  of  which  were  qualifying,  and  70  (40  percent)  of  which 
produced  lingering  effects.  The  further  breakdown  of  percentages  for 
qualifying  and  lingering  failures  does  not  appear  to  be  meaningful, 
since  correlation  with  test  levels  Is  necessary.  In  tMs  case,  the 
numerous  and  Inconsistent  variety  of  test  levels  rendered  such  a tabu- 
lation Impractical. 


Types  of  Failures 

Failures  have  already  been  classified  as  qualifying  or  lingering 
according  to  ease  of  repair  or  time  delay.  It  Is  desirable  to  report 
all  failures  for  future  reference.  However,  In  current  procedures  for 
recording  failures,  the  required  time  for  repair  is  usually  not  Indi- 
cated. Therefore,  it  Is  often  difficult  to  review  test  reports  for  the 
purpose  of  Identifying  trivial  or  significant  failures.  This  experience 
led  to  the  proposed  specification  that  the  test  engineer  record  his 
opinion  about  the  amount  of  repair  time  required.  The  opinion  can  be 
reviewed  and  corrected  by  more  qualified  personnel,  if  necessary.  Even 
knowledge  that  the  time  delay  was  unknown  would  be  helpful. 

Failures  observed  In  the  SAFEGUARD  data  could  be  classified  fur- 
ther according  to  consistency  or  independence.  Often,  more  than  one 
consistent  failure  was  observed  to  occur  at  a single  test  level.  It 
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is  roughly  estimated  that  more  than  90  percent  of  the  failures  which 
occurred  during  the  general  equipment  tests  were  of  this  type.  The 
estimate  Is  rough  because  the  recorded  results  were  not  oriented  so  that 
this  type  of  failure  could  be  clearly  Identified.  When  such  a failure 
occurs,  there  Is  no  doubt  that  it  must  be  eliminated  by  hardening  or 
Isolating  the  unit  to  withstand  the  environment. 

In  contrast,  the  failures  recorded  from  the  motor  control  center 
tests  were  very  Inconsistent;  l.e.,  the  same  failure  might  or  might  not 
occur  more  than  once  at  the  same  level  or  at  different  levels.  Usually, 
repairing  the  failure  after  one  test  would  have  no  significant  Influence 
on  whether  or  not  the  same  failure  would  occur  for  any  other  test.  In 
general,  the  higher  the  test  level,  the  greater  the  probability  of 
having  one  or  more  failures  of  this  type.  Statistically,  such  failures 
are  Independent.  Estimating  the  probability  of  failure  Is  more  diffi- 
cult In  this  case,  requiring  the  use  of  conventional  methods  of  proba- 
bility and  statistics.  When  Independent  failures  occur,  It  Is  espe- 
cially Important  to  conduct  a sufficient  number  of  tests  at  preferred 
test  levels  to  more  accurately  predict  the  probability  of  failure. 

Appendix  B provides  a statistical  method  for  estimating  the  prob- 
ability of  failure  for  Independent  failures  and  for  calculating  the 
accuracy  of  the  estimation.  The  results  of  this  analysis  provide 
criteria  for  planning  the  number  of  tests  and  test  levels  when  Indepen- 


)1cal  Failure  Modes 


Eventually,  It  will  be  necessary  to  generate  specifications  for 
designing,  mounting,  and  procuring  critical  equipment;  however,  it  Is 
not  feasible  to  consider  providing  specifications  for  all  such  equipment 
In  the  near  future.  A more  reasonable  approach  would  be  to  determine 
what  failures  have  occurred  most  often  during  testing  or  from  direct 
exposure  to  the  hazardous  environment.  Priorities  may  then  be  establish 
ed  for  attacking  the  various  modes  of  equipment  failure  in  order  of 
importance. 

The  most  complete  listing  of  equipment  failure  modes  encountered 
until  now  appears  to  be  from  SAFEGUARD  test  data.  To  complement  this 
information,  a survey  of  earthquake  damage  reports  is  scheduled  In  the 
near  future  to  Identify  typical  failure  modes  on  the  system  level  for 
systems  considered  to  be  essential  for  critical  facilities.  On  the 
component  level,  failure  modes  observed  in  the  SAFEGUARD  data  are: 

1 . Piping  failures: 

Joint  leakage 
Joint  shear 
Joint  separation 
Pipe  burst 


Braces  bent 

Brace  bolt  sheared 

Valve  failure  (check) 

Valve  chatter 

Indicator  failures: 

Pressure 
Temperature 
Liquid  level 
Flow  rate 

Sensing  device  failures: 

Transducer  shear-off 
Wires  cut 

Inadvertent  switch  actuation 

Machinery  failures: 

Pump  cavitation 
pump  leakage 

Motor-pump  coupling  failures 
Motor-generator  coupling  failures 
Pump  flow  setting  change 
Pump  seizure 

Motor  belt  drive  separation 

Mounting  failures: 

Tank  mounting  failure 
Pump  mounting  bolt  shear 
Motor  mounts  broken 
Legs,  brackets  broken 
Displacement  Interference 

Electrical  failures: 

Switch  contact  chatter 
Relay  chatter 
Relay  trip 

Circuit  breaker  trip 
Lights  broken. 
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Summary 

Chapter  2 proposed  overall  testing  and  test  report  specifications 
that  will  contribute  to  a more  complete  listing  of  future  test  specifi- 
cations. The  definitions  provided  will  facilitate  the  interpretation  of 
failure  data. 

Two  major  classifications  of  failure  data  have  been  Identified  from 
the  review  of  available  fragility  test  results.  First,  a failure  should 
be  classified  according  to  its  significance  in  preventing  a critical 
function.  If  a failure  causes  only  a minor  interruption  of  performance 
or  a degrading  effect  either  within  the  unit  or  with  an  Interfacing 
unit.  It  should  be  classified  as  qualifying.  If  It  causes  an  extended 
Interruption,  or  causes  other  Interfacing  units  to  fail,  it  should  be 
classified  as  lingering.  Attempts  to  harden  equipment  should  be  di- 
rected primarily  to  failures  exhibiting  lingering  effects.  Second,  a 
failure  should  be  classified  according  to  Its  predictability  of  occur- 
rence. If  the  same  failure  occurs  repeatedly  at  or  above  a given  test 
level.  It  should  be  Identified  as  consistent.  If  the  failure  occurs 
erratically  such  that  It  may  or  may  not  occur  again  at  the  same  or  a 
different  test  level,  It  should  be  Identified  as  independent. 

Guidelines  provided  in  Chapter  2 will  help  a test  engineer  plan  for 
an  adequate  number  of  tests  at  appropriate  test  levels.  The  results  of 
analyzing  Independent  failure  data  from  hypothetical  tests  showed  that  a 
relatively  large  number  of  tests  must  be  conducted  to  calculate  the 
probability  of  failure  reasonably  accurately.  Figure  3 showed  how  the 
number  of  tests  was  related  to  the  accuracy  of  the  prediction  of  fail- 
ure. 


Chapter  3 provided  evidence  of  the  existence  of  both  consistent  and 
independent  failures.  When  failures  occurred  consistently,  it  was  clear 
that  the  unit  had  to  be  hardened  or  Isolated  from  the  environment.  On 
the  other  hand,  the  occurrence  of  independent  failures  appeared  to  lead 
to  confusion,  since  such  data  were  recorded  for  further  subjective 
assessment  of  the  probability  of  failure.  Also,  the  Importance  of 
Identifying  a failure  as  qualifying  or  lingering  was  emphasized,  since 
this  distinction  was  not  always  clear  In  existing  reports. 

Typical  failure  modes  of  off-the-shelf  equipment  were  listed  to 
Identify  the  most  serious  failure  problems.  This  tabulation  is  probably 
sufficient  to  set  priorities  for  establishing  future  design,  mounting, 
and  procurement  specifications. 

Since  no  basic  theoretical  reference  could  be  found  on  fragility 
testing,  Appendix  A was  written  to  compare  fatigue,  strength,  and 
fragility  test  data  in  terms  of  fundamental  meaning  and  treatment.  It 
was  considered  Important  for  this  work  to  show  that  fatigue  and  strength 
data  are  formulated  as  probability  density  functions,  while  fragility 
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data  are  cumulative  and  must  be  formulated  as  a distribution  function. 
It  was  significant  that  a fragility  failure  could  not  be  identified 
uniquely  with  the  test  level,  since  the  failure  might  have  occurred  at 
any  other  level  below  the  test  level. 

Independent  failures  were  common  in  certain  units  tested  under  the 
SAFEGUARD  hardness  assurance  program.  To  interpret  independent  failure 
data,  statistical  methods  must  be  used,  as  demonstrated  in  Appendix  B. 
The  analysis  of  Appendix  B was  provided  for  two  purposes:  (!)  it  shows 

the  technical  level  required  to  Interpret  Independent  fragility  failure 
data,  and  (2)  it  provides  guidelines  for  a test  engineer  to  anticipate 
testing  requirements  when  independent  failures  are  identified.  The 
significant  results  were  reflected  in  the  proposed  specifications  of 
Chapter  2. 


Conclusions 

The  hardness  assurance  of  critical  equipment  involves  a series  of 
expensive  operations  beginning  with  fragility  testing.  Therefore,  when 
testing  Is  authorized,  the  results  should  be  reported  in  considerable 
detail.  The  cost  of  such  reports  should  be  small  compared  to  the  cost 
of  testing.  Adequate  hardness  for  a unit  may  never  be  achieved  within 
the  framework  of  available  time  and  funds,  since  many  manufacturers  have 
only  superficial  capability  of  testing  their  products  or  interpreting 
the  failure  data. 

Failure  data  should  be  clarified  originally  by  the  test  engineer 
and  reported,  with  help  from  a consultant  expert  If  necessary.  Failure 
data  can  be  used  effectively  for  overall  hardness  assurance  only  if  the 
units  to  be  tested  are  controlled  and  monitored,  and  the  test  data  are 
interpreted  in  an  unbiased  manner.  Detailed  and  uniform  report  in- 
formation should  be  required  as  described  herein,  since  it  may  be 
necessary  for  personnel  unfamiliar  with  the  test  unit  to  interpret  the 
failure  data  at  a later  time.  When  independent  failures  are  encounter- 
ed, the  test  engineer  should  recommend  continued  testing  if  there  is 
adequate  time  and  funds. 

Review  of  available  test  data  revealed  that  consistent  failures  are 
likely  to  occur  in  most  mechanical  equipment  used  for  Internal  utility 
and  lifeline  systems  in  critical  facilities.  Independent  failures  are 
likely  to  occur  in  electrical  control  equipment.  If  a unit  exhibits 
consistent  failures,  a fragility  envelope  can  be  determined.  For 
independent  failures,  a precise  definition  of  a fragility  envelope  is 
not  possible,  and  the  prediction  of  failure  becomes  a statistical 
problem. 

Failure  data  analysis  results  have  been  recast  in  the  form  of 
proposed  specifications.  These  specifications  should  be  combined  with 
future  testing  specifications  from  research  that  is  not  directly  asso- 
ciated with  the  objectives  of  this  particular  task. 
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APPENDIX  A: 


GVERVIEW  OF  RELATED  DESTRUCTIVE 
TESTING  METHODS 


No  fundamental  and  readily  available  texts  or  other  references 
could  be  found  that  address  the  statistical  treatment  of  fragility  data. 
Since  most  civil  and  mechanical  engineers  are  at  least  superficially 
familiar  with  the  treatment  of  fatigue  and  strength  test  data,  a com- 
parison with  these  methods  Is  necessary,  since  there  are  Important 
differences  that  may  not  be  immediately  obvious  to  practicing  engineers. 

All  statistical  references  denote  the  result  of  a test  as  an 
outcome.  Input  parameters  may  be  fixed  or  otherwise  deterministic,  or 
they  may  be  random.  However,  the  outcome  is  usually  random,  since  it 
cannot  be  predicted  deterministically. 

In  a fatigue  test,  a unit  is  loaded  in  a cyclic  (or  random  cyclic) 
manner.  The  loading  pattern  and  time  history  is  controlled  by  the 
investigator  and  is  part  of  the  input  data.  The  outcome  is  the  number 
of  cycles  (or  time)  to  failure.  Note  that  failure  itself  is  not  the 
outcome,  and  the  test  will  continue  until  failure  occurs.  The  purpose 
of  a series  01  such  experiments  is  to  determine  the  statistical  pro- 
perties of  the  outcome  data,  so  that  time  to  failure  for  nominally 
identical  units  can  be  predicted  by  probability  within  certain  confi- 
dence limits.  The  outcome  data  can  be  arranged  in  the  form  of  a proba- 
bility density  function,  such  as  the  bell -shaped  curve  of  the  normal 
density  function.  The  condition  is  shown  in  Figure  Al , where  the  peak 
of  the  bell  occurs  at  the  average  time  to  failure  for  nominally  identi- 
cal specimens  for  a specific  dynamic  loading  condition.  If  the  loading 
condition  is  varied,  the  bell -shaped  pattern  of  times  to  failure  will 
adjust  to  a new  position.  If  enough  loading  conditions  are  tried,  a 
continuous  line  can  be  drawn  connecting  the  peaks  of  the  density  curves, 
describing  the  average  time  to  failure  under  any  of  the  considered 
loading  conditions. 

A similar  condition  exists  with  strength  testing  in  which  the 
load  on  the  specimen  is  Increased  until  failure  occurs.  The  outcome 
is  not  failure  (which  is  expected  to  occur),  but  the  stress  or  force 
level  at  which  failure  occurred.  For  nominally  identical  specimens, 
the  outcome  data  can  again  be  described  by  a probability  density  func- 
tion In  the  form  of  a bell -shaped  curve.  The  peak  of  the  bell  occurs 
at  the  average  force  at  which  failure  occurred. 

Fragility  data  is  markedly  different  than  either  of  the  above 
types  of  data.  In  this  case  the  test  level  is  controlled  and  selected 
by  the  investigator,  and  forms  part  of  the  input  data.  There  are  two 
possible  outcomes:  survival  and  failure.  A statistical  test  of  this 


type  Is  called  a Bernoulli  experiment.2  The  test  level  is  not  an  out- 
come, and  a direct  comparison  of  levels  between  a fragility  test  and  a 
strength  (or  fatigue)  test  Is  not  appropriate.  The  major  difference  is 
that  when  a failure  occurs  at  a given  test  level  in  a fragility  test,  it 
may  have  occurred  at  any  other  test  level  less  than  or  equal  to  that 
level.  Hence  the  test  level  does  not  uniquely  define  the  true  flaw 
level  at  which  failure  would  have  occurred.  This  is  a cumulative 
probability  phenomenon  and  is  depicted  by  a probability  distribution 
function,  rather  than  by  a density  function  as  for  fatigue  and  strength 
testing  data.  (A  distribution  function  is  simply  the  Integral  of  a 
density  function.) 


Figure  A1 . Fatigue  data  presentation. 

When  a consistent  flaw  exists  in  a fragility  specimen,  its  proba- 
bility of  failure  is  given  by  a step-like  distribution  function,  as 
shown  in  Figure  A2a.  That  is,  below  a fairly  precise  test  level,  there 
will  be  zero  probability  of  failure,  and  above  this  level,  there  will  be 
100  percent  probability  of  failure.  The  density  function  for  such  a 
distribution  may  be  depicted  theoretically  by  a mathematical  "delta" 
function,  and  is  formed  as  the  derivative  of  the  step  function.  This 
delta  function  may  be  compared  with  the  limit  of  the  bell -shaped  density 
function  obtained  by  fatigue  or  strength  testing;  the  span  of  failure 
levels  in  the  delta  function  is  very  small. 
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Figure  A2.  Distribution  and  density  functions  for  consistent 
and  Independent  failures. 

When  Independent  flaws  occur  In  a fragility  specimen,  there  is 
no  precise  level  at  which  failure  will  occur,  as  shown  In  Figure  A2b. 
The  higher  the  test  level,  the  greater  the  probability  that  failure 
will  occur.  The  derivative  of  such  a distribution  function  usually 
appears  as  a skewed  density  function,  as  shown  In  the  lower  curve  of 
the  figure.  If  negative  test  levels  are  considered  (i.e.,  test  shocks 
In  opposite  directions),  the  density  function  will  appear  symmetric  at 
about  the  zero  level.  Hence,  the  density  function  derived  from 
fragility  data  (when  independent  flaws  exist)  may  appear  as  a skewed 
bell-shaped  curve,  and  its  peak  value  will  usually  be  located  close 
to  the  zero  1 evel . 


It  is  expected  that  most  units  will  exhibit  both  consistent  and 
independent  flaws  to  some  extent.  The  distinction  is  often  difficult 
to  make  unless  the  test  engineer  recognizes  the  type  of  flaw  at  the 
time  of  the  test  and  records  his  observation  for  future  reference. 


J 
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APPENDIX  B: 


STATISTICAL  ANALYSIS  OF  FRAGILITY 
DATA  (INDEPENDENT  FAILURES) 


The  Fundamental  Fragility  Problem 

This  appendix  considers  only  problems  occurring  with  Independent 
failures.  All  references  to  an  environmental  test,  flaw,  or  fragility 
level  Implies  a shaped  spectrum  which  can  be  defined  by  a single  para- 
meter, called  the  "level." 

For  the  simplest  fragility  test,  consider  a unit  which  will  either 
survive  (S)  or  fail  (F)  if  it  is  subjected  to  one  specified  test  level.3 
Assume  that  eight  tests  are  held,  with  the  following  outcomes: 

S,  F,  S,  S,  S,  F,  S,  S. 

If  p denotes  the  probability  of  failure,  then  the  probability  of  sur- 
vival is  (1  - p).  Note  that  failure  has  occurred  twice  at  this  level 
out  of  eight  trials*,  hence, 

p ■ | * 0.25  [Eq  Bl] 

Also  note  that  the  test  level  does  not  precisely  define  the  level  at 
which  failure  occurs,  since  the  unit  will  often  survive  at  this  level 
with  (1  - p)  = 0.75.  The  only  conclusion  is  that  when  failure  did 
occur,  the  actual  flaw  level  could  have  been  any  level  less  than  or 
equal  to  the  actual  test  level. 

For  more  complicated  problems,  this  basic  problem  is  cast  as  a 
problem  of  maximum  likelihood.  A likelihood  function,  L(p),  is  formed 
by  the  product  of  the  p and  (1  - p)  terms  as  the  survivals  and  failures 
occurred  in  the  above  experiment: 

L(p)  = (1  - p)  p(l  - p) (1  - p) 

= PZ(1  - P)6  [Eq  B2] 

Now  p may  be  calculated  by  maximizing  L(p)  with  respect  to  p: 

L'(p)  - 0 - p(l  - p)5  (2  - 8p)  [Eq  B3] 

where  L'(p)  denotes  partial  differentiation  of  L with  respect  to  p. 

Note  that  L'(p)  = 0 at  p = 0 and  at  p = 1 , and  is  positive  for 
0 < p < 1.  Hence,  a maximum  exists,  and  p can  be  calculated.  The 
third  terir!  in  parentheses  on  the  right  of  Eq  B3  yields 
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[Eq  B4] 


as  found  previously.  When  p Is  calculated  in  this  manner,  It  Is  called 
a maximum  likelihood  (ML)  estimator  of  the  true  value  of  p,  which  Is 
the  desired  quantity  to  be  estimated  from  the  experiment  results. 
Likewise,  L(p)  Is  referred  to  as  the  likelihood  function  (LF). 


The  fundamental  fragility  test  can  be  generalized  for  one  test 
level,  where  there  are  n tests  and  k failures: 


L ' (p) 


Up)  - pk(l  - p)"'k 
) ■ pk-'(1  - p)"-k(np  - k) 


D * - 
v n 


[Eq  B5] 
[Eq  B6] 
[Eq  B7] 


The  above  relations  follow  Immediately  from  Eqs  B2,  B3,  and  B4. 


In  the  fragility  tests  performed  on  the  motor  control  centers 
discussed  In  Chapter  3,  numerous  cases  occurred  in  which  Eqs  B5,  B6,  and 
B7  could  be  applied  at  a single  test  level.  However,  more  Information 
was  always  available  because  each  unit  was  subjected  to  more  than  one 
test  level.  The  problem  of  calculating  the  probability  of  failure 
thereby  becomes  more  complicated,  but  accuracy  Improves  because  more 
Information  can  be  used.  The  use  of  the  ML  estimation  method  Is  war- 
ranted when  various  test  levels  are  used. 


Extension  and  Generalization  of  the 


When  more  than  one  test  level  appears  In  numerous  trials  of  a 
fragility  test,  the  probability  of  failure  will  be  a function  of  test 
level.  Generally  more  Information  about  the  governing  probability 
distribution  function  for  failure  must  be  known  or  assumed. 

The  use  of  the  LF  to  Include  various  test  levels  Is  possible  if 
p can  be  written  as  a continuous  function  of  the  test  level,  as 


[Eq  8] 


where  x Is  the  test  level. 

Also,  the  LF  given  by  Eq  B5  as 


L(p)  * Pk(l  - P)n_k 


[Eq  B9] 


must  be  an  admissible  probability  density  function.  The  required  pro- 
perties for  the  LF  to  be  an  admissible  density  function  are 


V* 


« 


Up)  to 

cfup)  dp  = 1,  c > 0 


[Eq  BIO] 


where  c is  a positive  constant. 

Inequality  BIO  was  demonstrated  to  be  true,  for  practical  pur- 
poses, In  the  discussion  following  Eg  B3.  To  prove  that  Eq  Bll  is  also 
true,  note  that  p Is  defined  on  [0,1]  and  is  zero  elsewhere.  Then, 
putting  Eq  B9  Into  Eq  B11  gives 


pk(l  - p)n’k  dp 


r(k  + l)r(n  - k + 1 
r(n  + 2) 


[Eq  B12] 


where  r is  the  conventional  gamma  function. 


Hence,  Eq  Bll  Is  satisfied  If 


r(n  + 2) 

5 fin  - k + 


[Eq  B13] 


It  will  be  shown  that  c cancels  out  of  subsequent  calculations  and  can 
be  any  positive  bounded  constant.  The  value  of  c given  by  Eq  B13  Is 
therefore  acceptable.  With  this  value  of  c,  the  Integral  shown  In  Eq 
Bll  or  B12  depicts  the  conventional  beta  function,  and  the  LF  for  a 
single-level  fragility  test  has  the  shape  of  the  beta  density  function." 
Again,  this  condition  Implies  that  L(p)  Is  zero  at  p * 0 and  p * 1 , and 
Is  positive  for  0 < p < 1.  For  a single  test  level,  It  has  a single 
maximum  value  from  which  p can  be  calculated  by  the  ML  method. 

The  required  extension  of  the  LF  for  more  test  levels  can  be  ob- 
tained as  the  product  of  the  beta  density  functions  (the  LF's  for 
single  test  levels).5 


Up)  = n ci  l^)  = n c1  n Upj) 


L(p).cn  . p,)"1'"1  {o  <„]<„,}  lEqBH] 


"6,  H.  Hahn  and  S.  S.  Shapiro,  Statistical  Models  in  Engineering 
(John  Wiley  and  Sons,  Inc.,  1967). 

5B.  W.  Lindgren,  Statistical  Theory  (The  MacMillan  Company,  1962). 


where  C Is  the  product  of  the  c.,,  and  1 Is  the  total  number  of  test 
levels.  1 

In  Eq  B14,  the  Pi  appear  as  discrete  probabilities,  but  they  are 
not  Independent,  since  p Is  a function  of  x.  It  Is  recalled  that  a 
failure  will  occur  If  a flaw  level  In  the  specimen  Is  less  than  or  equal 
to  the  test  level.  Since  more  than  one  flaw  level  may  exist  below  a 
given  test  level,  the  probability  of  failure  is 

= P (at  least  one  flaw  level  < test  level  x^)  [Eq  B15] 

This  Is  a cumulative  probability  phenomenon,  where  xi  denotes  the 
test  level,  and  P is  any  admissible  probability  distribution  function. 
Letting  y denote  a flaw  level,  x a test  level,  and  F(x)  the  governing 
distribution  function  for  failure,  Eq  B15  may  be  written  as 

Pi  * P(y  < xt)  - F(Xj ) - F1  [Eq  B16] 

The  probabilities  pi  are  still  discrete  but  are  now  expressed  as  con- 
tinuous functions  of  the  test  levels  x{.  So  far,  the  only  restriction 
placed  on  F(x)  Is  that  It  satisfy  the  requirements  for  an  admissible 
probability  distribution  function. 

The  problem  of  maximizing  Eq  B14  with  respect  to  each  pi  Is  greatly 
simplified  by  replacing  p<  with  F(x^ ) , so  that  F(x-i)  Is  a function  of 
one  or  more  (possibly  up  to  three)  parameters  aj,  j ■ 1,2,.  . . ,0. 

The  maximum  number  of  parameters,  J,  Is  usually  much  less  than  the 
total  number  of  tests,  I.  These  parameters  are  now  the  unknowns, 
rather  than  the  Pi,  and  the  function  F(x^ ) is  assumed  to  be  a known 
function  F(xi;  ajj  0f  the  test  level  and  the  parameters.  The  task  Is 
now  to  maximize  tne  LF,  Eq  B14,  with  respect  to  the  cu  instead  of  the  p, 
which  is  much  easier  to  accomplish.  J 

Putting  Eq  B16  Into  Eq  Bl 4 gives 


L(x;  i)»cn  a)  fl  - F(Xl ; a)}'11"1"1 

1=1  1 ' 

or  in  simplified  form, 

L(x;  a)  - cn  f/i  (1  - f/1'*1  [Eq  B17] 

1=1 

where  a is  a vector  of  the  c^,  j * 1,2,.  . .,0. 

In  the  usual  treatment  of  a likelihood  function,  the  logarithm  of 
Eq  B17  Is  taken  to  obtain 


[Eq  B18] 
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AmL(x*,  a)  = ZnC  + £ [k^UnF.  + (n^  - k.)S.n(l  - F..)] 
1=1 


It  Is  proven6  that  maximizing  the  logarithm  of  a likelihood  function  Is 
equivalent  to  maximizing  the  function  Itself.  Thus,  the  problem  Is 
further  simplified  by  dealing  with  sums  Instead  of  products.  Eq  B18  Is 
maximized  with  respect  to  each  Xj  as 
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j=l,  2,.  . .,J  [Eq  B19] 


Note  that  the  constant  C has  been  eliminated,  as  previously  stated, 
and  simplification  of  Eq  B19  leads  to  J simultaneous  equations  of  the 
form 
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[Eq  B20] 


In  practice,  there  appears  to  be  no  need  for  J to  exceed  unity,  although 
It  may  be  as  high  as  three  if  hundreds  of  test  results  are  available  for 
a single  unit.  Independent  failure  data  are  not  now  readily  available, 
and  applying  sophisticated  probability  functions  (l.e.,  with  as  many  as 
three  parameters)  does  not  appear  to  be  warranted. 


The  solution  of  Eq  B20  for  a may  ^leld  numerous  roots,7  in  which 
case  the  correct  result  Is  the  set  of  a which  yields  to  the  largest 
maximum.  When  this  condition  exists,  there  will  also  be  minimum  roots, 
since  one  minimum  will  exist  between  every  pair  of  maximum  points.  This 
condition  has  not  yet  been  observed. 


It  Is  noted  in  Eq  B20  that  F(x;  a)  must  be  differentiable  with 
respect  to  each  aj.  Also,  although  it  is  not  necessary  to  differentiate 
L(x;  a),  a maximum  will  exist,  provided  that 


3a1 


Uni)  < 0 


[Eq  B21] 


’j 


For  further  discussion,  the  roots  of  Eq  B20  will  be  denoted  by  6t, 
where  It  Is  Implied  that  fills  a vector  If  more  than  one  parameter  must 
be  estimated. 


b'£.  J.  Gumbel , Statistics  of  Extremes  (Columbia  University  Press, 
1958). 


7M.  0.  Kendall  and  A.  Stuart,  The  Advanced  Theory  of  Statistics  (Hafner 
Publishing  Company,  1969). 
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Accuracy  of  the  Estimator 

The  solution  of  £q  B20  yields  a value  6 which  estimates  the  true 
value  of  a.  Intuitively,  It  Is  expected  that  6 will  approach  a as  the 
number  of  trials  Increases.  Also,  It  should  be  expected  that  accuracy 
will  Improve  If  the  trial  test  levels  are  spaced  such  that  Increments 
of  F are  uniformly  distributed  In  the  range  0 < F < 1. 

The  dependence  of  accuracy  on  the  number  of  trials  and  test  levels 
Is  auantlfled  by  the  calculation  of  the  variance  of  &,  denoted  as 
va r(d).  Both  6t  and  var(d)  can  be  calculated  from  a series  of  numerous 
tests  at  various  levels. 

The  general  fragility  problem  for  Independent  failures  has  been 
shown  to  fall  quite  naturally  Into  a problem  of  maximum  likelihood.  A 
minimum  variance  bound  (MVB)  can  be  calculated  If  the  problem  Is  cast 
In  this  manner,8  but  there  may  be  many  other  techniques  In  addition  to 
the  ML  method  to  estimate  a.  However,  the  highest  attainable  accuracy 
is  reflected  by  the  MVB,  which  Is  determined  by  the  ML  method.  This 
does  not  Imply  that  the  MVB  Is  the  actual  var(d)  found,  even  If  the  ML 
method  Is  used.  Instead,  the  MVB  Is  a variance  which  Is  less  than  or 
equal  to  the  actual  variance  calculated  by  any  estimation  technique, 
Including  the  ML  method.  An  estimator  which  attains  such  a lower  bound 
for  var(6t)  Is  called  an  MVB  estimator.  If  the  condition  for  consistency 
and  sufficiency  exists  (see  The  Advanced.  Theory  of  Statistics9)  and  If 
there  Is  an  unbiased  MVB  estimator,  the  estimator  Is  given  by  the  ML 
method. 

The  MVB,  v,  Is  generally  found  by  taking  the  negative  reciprocal  of 
the  expected  value  of  the  second  derivative  of  the  log-likelihood  func- 
tion, written  as 


v(S)  » 1/Fr(60 


[Eq  B22] 


where 


R2{a)  » - e(-V-  *<nL)' 

dac 


[Eq  B23] 


The  determination  of  the  expected  value,  shown  In  Eq  B23,  Is  a standard 
statistical  operation,  and  can  be  found  In  any  fundamental  statistical 
reference.  In  the  particular  case  when  L Is  composed  of  products  of 
a density  function  which  admits  a single  sufficient  statistic  for  the 
parameter  a,  Eq  B23  simplifies  to 


R (d)  = - ( — jjjr  A«L)  1 3 
3a 


[Eq  B24] 


°M.  G.  Kendall  and  A.  Stuart,  The  Advanced  Theory  of  Statistics 
{Hafner  Publishing  Company,  1969). 
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The  density  function  In  this  case  Is  from  the  beta  distribution,  as 
given  by  Eq  812  or  Eq  814.  Evidence  that  sufficiency  Is  satisfied  Is 
provided  In  The  Advanced  Theory  of  Statietice19  for  the  binominal 
distribution,  which  can  be  written  in  the  form  of  a beta  distribution.11 
Although  no  further  proof  of  sufficiency  Is  provided  here,  Eq  B24  has 
been  used  to  calculate  v in  Eq  B22.  If  the  analysis  of  independent 
failures  from  fragility  testing  becomes  a common  operation  in  the  future, 
a more  rigorous  proof  of  sufficiency  should  be  provided,  and  Eq  823  used 
Instead  of  Eq  B24  if  and  when  necessary.  Also,  It  would  be  Informative 
to  calculate  the  actual  variance,  var(fi),  in  addition  to  the  MVB,  v(fi). 

The  first  derivative  of  the  logarithm  of  the  LF  Is  shown  In  Eq  B19 
or  Eq  B21  as 


■2  | [frHry] 


where  each  term  except  a In  the  outside  bracket  expression  Is  under- 
stood to  be  subscripted  with  1.  The  second  derivative  Is  obtained  for 
one  parameter  and  simplified  as 
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However,  Eq  B26  Is  valid  only  if  there  Is  one  parameter,  a,  to  estimate. 
For  more  than  one  parameter  In  the  expression  for  F,  a matrix  of  equa- 
tions like  Eq  B26  Is  formed,  such  as 
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where  a,m  » 1 , 2,  . . .,  J, 
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1 °M,  G.  Kendall  and"  S'.  Stuart,  The  Advanced  Theory  of  Statistics 
(Hafner  Publishing  Company,  1969). 
nG.  J.  Hahn  and  S.  S.  Shapiro,  Statistical  Models  in  Engineering 
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In  this  case,  a matrix  of  v terms  Is  formed  from  the  negative  Inverse  of 
the  matrix  Eq  B27: 

. tEq  B28] 

where  the  brackets  denote  J x J square  matrices. 

The  terms  on  the  main  diagonal  of  [v}  are  the  MVB's  for  the 
associated  &j.  The  sguare  roots  of  these  terms  will  be  the  minimum  stan- 
dard  deviation  bound  (M5DB)  for  each  &*.  Letting  cj,  j ■ 1,  J,  denote 
the  MSDB ' s , the  coefficient  of  vaHanoe,  may  be  formed  for  each  6t, 

ae12  J 
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1,2.  . . 
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[Eq  B29] 


This  coefficient  provides  a relative  measure  of  accuracy.  For  similar 
tests  of  Identical  test  levels.  It  Implies  that  58.4  percent  of  the  time 
the  estimator  6l*  will  be  within  cj  (converted  to  percent)  of  the  calcula- 
ted value  of  dj.  Also  95.4  percent  of  the  time  6U  will  be  within  2c-} 
of  the  calculated  value,  and  99.7  percent  of  the  time  It  will  be  within 
3c j of  that  value. 


Selection  of  a Distribution  Function 

For  a general  fragility  problem,  an  assumption  must  be  made  about 
the  form  of  the  distribution  function  for  failure,  F(x;a).  Because  of 
the  lack  of  large  quantities  of  Independent  failure  data,  the  restric- 
tions on  F should  be  minimized.  First,  F must  be  an  admissible  prob- 
ability distribution  function,  satisfying  standard  requirements  In 
accordance  with  fundamental  statistical  theory. 

It  might  be  expected  that  the  density  function  for  F.  (Its  deriva- 
tive with  respect  to  x)  should  be  limited  at  x = 0 and  possibly  skewed 
in  the  direction  of  Increasing  magnitude  of  x.  This  Implies  that 
F(0;a)  = 0 and  that  F will  monotonlcally  Increase  to  unity  as  test  level 
increases.  It  does  not  presently  appear  that  the  density  function  must 
decrease  monotonlcally  with  x,  although  this  assumption  may  be  con- 
venient, simple,  and  warranted  for  lack  of  sufficient  failure  data. 

The  use  of  distribution  functions  which  must  be  written  In  integral 
form  should  be  avoided,  at  least  temporarily.  For  example,  the  normal, 
gamma,  and  beta  distributions  are  written  In  Integral  form.  (The  beta 
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function  for  F should  not  be  confused  with  the  beta  function  for  the 
distribution  of  the  LF.  It  Is  conceivable  that  F could  also  be  repre- 
sented as  a beta  function.)  This  restriction  should  be  Imposed  because 
It  may  take  thousands  of  times  longer  to  obtain  a computer  solution  for 
the  parameter  because  of  the  requirement  to  integrate  many  times  to 
obtain  F in  the  iterative  solution  process. 

Typical  admissible  distribution  functions  are  those  presently  being 
used  (by  coincidence)  in  extremal  analysis.13  The  simplest  and  most 
appropriate  form  for  early  studies  Is  recommended  as  the  exponential 
distribution: 


F(x;a)  = 1 - e'ax  [Eq  B30] 

This  is  a one-parameter  function  which  has  a monotonically  decreasing 
density  function  for  x > 0 and  a.  >0.  It  is  bounded  at  x B 0,  but  is 
unlimited  for  large  values  of  x.  All  statistical  moments  exist.  The 
Pareto  distribution  Is  given  as 

F(x;oT)  = 1 - (x  - B)'a  [Eq  B31  ] 

where  x may  be  multiplied  by  a positive  constant  If  desired. 

Here,  B >.  0,  and  the  lower  bound  for  x is  shown  by  x >.  1 + B,  while 
a >_  1.  The  distribution  Is  unlimited  for  large  values  of  x,  but  statis- 
tical moments  greater  than  or  equal  to  a do  not  exist.  An  Investigator 
may  have  reason  to  believe  that  such  a function  may  be  applicable  to  a 
particular  fragility  problem.  In  comparison  to  the  exponential  density 
function,  the  derivative  of  Eq  B31  has  a peak  value  (mode)  at  some  value 
x > 0,  and  therefore  does  not  decay  monotonically  with  Increasing  x.  If 
x is  multiplied  by  a constant,  Eq  B31  may  be  regarded  as  a three-para- 
meter distribution,  but  it  may  be  reduced  to  a two-  or  one-parameter 
function  by  letting  the  constant  equal  unity  and  by  setting  3=0.  For 
cases  In  which  the  investigator  feels  that  bounds  on  x are  necessary  in 
both  directions,  the  limited  distribution  may  be  used: 

F(x;o)  = 1 - (3  - x)“  [Eq  B32] 

Again,  x may  be  multiplied  by  a positive  constant  to  form  a three- 
parameter  distribution  if  desired.  As  Eq  B32  is  written,  the  bounds 
on  x are  3-1  <x<3»w1thB>0  and  a > 0,  If  the  bounds  are  known 
(i.e.,  if  6 is  known),  and  the  constant  multiplier  for  x Is  assumed  as 
unity,  Eq  B32  reduces  to  a one-parameter  distribution.  Again,  the  mode 
of  the  density  function  occurs  at  x > 0. 

There  are  more  general  asymptotic  distributions  associated  with 
each  of  the  above  distributions.  For  example,  the  first  asymptotic 
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distribution  Is  associated  with  the  exponential  type.  It  Is  a two- 
parameter  function  given  as 


F(x;oT)  ■ exp  [-e-0^*  ' 6^] 


[Eq  B33] 


Restrictions  or  choices  for  a and  3 are  discussed  in  detail  In  Statistics 
of  Extreme* 14  The  advantage  of  using  such  an  asymptotic  function  Is 
that  It  will  generally  reflect  the  behavior  of  any  distribution  function 
of  a class  defined  as  the  exponential  type  for  sufficiently  large  values 
of  x.  Hence,  the  Investigator  need  only  assume  the  typo  of  distribution 
function  If  he  Is  willing  to  test  at  relatively  high  levels  where  failure 
Is  likely  to  occur.  Two  other  related  asymptotic  distributions  are 
available  for  more  general  Pareto  and  limited  distributions. 

For  this  work,  only  those  functions  presented  above  have  been  pro- 
grammed and  analyzed. 

Solution 

The  solution  of  the  fragility  problem  for  the  Independent  failures 
consists  of  estimating  the  parameters  a for  the  assumed  distribution 
function  F(x;a).  If  the  parameters  are  known,  the  probability  of  fail- 
ure can  be  calculated  easily  for  any  test  level,  x.  An  adequate  com- 
puter program  may  be  almost  completely  established  from  generally  ac- 
cepted and  published  subroutines.15’1*  The  following  steps  are  neces- 
sary to  obtain  a solution: 

1.  Assume  a suitable  distribution  function,  such  as  one  suggested 
in  Eqs  B29  - B32.  The  exponential  distribution  Is  recommended  until 
more  data  become  available  to  warrant  using  other  distributions. 

2.  If  0 parameters  must  be  estimated,  set  up  0 simultaneous  equa- 
tions, as  given  by  Eq  B20.  There  will  be  n tests  and  k failures  at 
each  test  level  xi  obtained  from  the  experimental  test  data.  Here, 

0 < k <_  n and  n > 1 at  each  test  level . 

3.  Use  a conventional  Iteration  method,  such  as  the  Newton-Rapson 
technique,  to  calculate  the  estimators  aj,  j ■ 1,  2.  . . ,J. 

4.  Calculate  the  J x J matrix  [v]  (the  MVB's)  given  by  Eq  B28. 

This  matrix  should  be  reasonably  well -conditioned,  Implying  that  the 
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terms  on  the  main  diagonal  should  be  generally  larger  than  the  off- 
diagonal  terms.  If  this  situation  Is  not  observed,  it  is  evident  that 
the  selection  of  F(x;a)  was  poor. 

5.  Take  the  square  roots  of  the  diagonal  terms  of  [v]  from  Eq 
B28  to  obtain  the  MSDB’s  oj,  j = 1,  J.  Then  calculate  the  coefficients 
of  variation  c.,  given  by  Eq  B29. 

J 

As  suggested  previously,  it  may  be  desirable  In  the  future  to 
calculate  the  actual  covariance  matrix  as  an  additional  step.  Present- 
ly, however,  completion  of  the  above  five  steps  constitutes  the  solution 
of  the  Independent  failure  fragility  problem. 


Hypothetical  Failure  Studies 

Many  computer  runs  were  made  to  analyze  hypothetical  failure  data 
by  the  procedure  outlined  above  to  gain  Information  about  the  relation 
between  the  number  of  tests  and  the  accuracy  of  the  estimators. 

The  hypothetical  data  were  generated  as  follows.  The  total  number 
of  trials,  I,  for  a test  series  was  selected.  Then  I + 1 equal  In- 
crements were  taken  between  0.0  and  1.0  to  establish  Ideal  Increments 
In  the  function  F(x;a).  Hence,  Fi,  1 = j,  2.  . .,1,  was  established 
and  distributed  with  equal  increments  over  0.0  < F < 1.0.  Next,  the 
desired  algebraic  form  for  F(x;a)  was  chosen  from  any  of  Eqs  B30-B33, 
and  values  of  cxj  were  assumed.  For  each  value  of  Fi,  the  corresponding 
value  of  the  test  level  x^  was  calculated  as  shown  In  Eq  B2  for  the 
exponential  distribution.  This  provided  I ideal  test  levels  to  assure 
the  best  accuracy  in  calculating  the  parameters.  Only  one  test  was.  run 
for  the  fictitious  unit  at  each  level:  a random  number,  selected  from 
numbers  uniformly  distributed  between  0.0  and  1.0,  was  selected  by 
computer;  if  this  number  was  less  than  or  equal  to  Fi,  the  test  out- 
come was  considered  a failure;  if  the  number  was  greater  than  F., , the 
outcome  was  survival. 

The  above  technique  provided  I outcomes  for  each  hypothetical  test 
series  for  a fictitious  unit.  As  the  computer  programming  was  establish 
ed,  the  value  of  I and  the  algebraic  expression  for  F(x;ct)  could  be 
varied  at  will.  The  Input  data  to  the  solution  program  consisted  of 
the  test  levels  x-j , the  function  F(x;a),  and  ki  a 0 or  1 , depending  on 
whether  survival  or  failure  had  occurred.  The  value  of  nj  a 1 was 
assumed  in  these  hypothetical  studies,  since  only  one  test  was  held 
at  each  level.  However,  this  was  not  a general  restriction,  since  real 
data  could  be  used  in  the  solution  program  for  all  acceptable  values  of 
k,|  and  n^  at  each  x^ . 

For  consistency  in  analyzing  results,  the  number  of  trials  for 
each  of  the  four  distributions  was  taken  as  I = 7,  10,  15,  20,  30,  50, 
75,  and  100.  For  each  of  these  values  of  I,  100  distinct  hypothetical 
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fragility  problems  were  solved.  Solution  of  each  problem  consisted  of 
calculating  the  a vector  to  estimate  the  known  values  of  aj  which  had 
been  assumed  to  generate  the  failure  data.  The  MVB  matrix;  [v],  was 
also  calculated.  After  100  problems  had  been  run  for  each  value  of  I, 
the  values  of  each  were  averaged.  It  is  not  an  accepted  statistical 
practice  to  average  the  coefficients  of  variance  directly,  since  they 
are  calculated  by  using  the  square  roots  of  the  diagonal  terms  of  [vj. 
Hence,  each  diagonal  term  of  [v]  was  averaged  first;  then_the  square 
roots  of  these  averages  were  taken  to  obtain  the  average  oj  values. 
Finally,  the  average  ci's  were  divided  by  the  average  dj’s  to  obtain 
the  average  coefficients  of  variance,  c*,  In  accordance  with  Eq  B29. 

J 

These  results  are  shown  In  Figures  B1-B4  as  plots  of  average 
fii  vs.  I,  and  cj  vs.  I for  each  parameter  in  each  of  the  four  distribu- 
tions. All  four  distributions  in  Figures  B1-B3  are  shown  as  reduced  to 
one  parameter  (0=1)  distributions.  Convergence  of  solutions  was  more 
difficult  for  low  values  of  I,  but  was  always  ottalned  for  the  one- 
parameter  distributions.  Usually,  convergence  for  two-parameter  dis- 
tributions was  very  difficult  for  I < 10  and  for  I < 30.  Convergence 
for  three-parameter  distributions  has  never  been  obtained  for  values  of 
I < 100;  hence,  no  results  for  the  three-parameter  distributions  were 
obtained.  Figure  B4  shows  the  results  for  a two-parameter  distribution 
(the  first  asymptotic).  Note  that  all  assumed  values  of  cu  are  shown 
normalized  to  unity  for  simplicity  of  presentation.  (The  results  for 
the  one-parameter  distributions  were  averaged  and  are  presented  in 
Chapter  4.) 

It  should  be  noted  that  some  positive  bias  usually  results  for  the 
estimators  when  I < 20.  However,  the  are  usually  close  to  unity,  as 
required,  for  I > 20.  The  bias  can  be  corrected  for  low  values  of  I 
directly  from  the  plots.  The  consistent  positive  error  implies  that  the 
ML  method  does  not  yield  precisely  unbiased  estimators  in  this  applica- 
tion. This  conclusion  would  be  substantiated  only  if  the  programming 
used  was  found  to  be  faultless  in  this  respect. 


Motor  Control  Center  Results 


The  ML  solution  technique  was  applied  to  all  motor  control  center 
data  discussed  in  Chapter  3.  (It  will  be  recalled  that  no  consistent 
failures  were  identified  in  the  five  units  tested.)  Table  B1  provides 
the  results  of  this  technique  where  the  probability-of -failure  law  was 
assumed  to  follow  the  exponential  distribution.  Other  distributions 
were  tried,  but  no  significantly  different  results  were  obtained  to 
warrant  additional  tabulation.  Only  those  test  series  have  been  tabu- 
lated for  which  at  least  one  failure  occurred,  since  the  parameter  could 
not  be  calculated  if  no  failure  occurred. 

The  poorest  accuracy  (i.e,,  the  poorest  coefficients  of  variation) 
occurred  in  Table  B1  when  only  one  failure  was  recorded.  Although 
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I » NUMBER  OF  TEST  LEVELS 
(IOO  TRIALS  AVERAGED,  EACH  I) 


I > NUMBER  OF  TEST  LEVELS 
(100  TRIALS  AVERAQEO,  EACH  I) 


Figure  B2.  Parameter  and  accuracy  for  the  one-parameter 
Pareto  distribution. 
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COEF.  OF  VARIATION  PARAMETER 


FUNCTION:  F(x)-l-(l-xr 


I ■ NUMBER  OF  TEST  LEVELS 
(IOO  TRIALS  AVERAGED,  EACH  I) 


Z « NUMBER  OF  TEST  LEVELS 
(100  TRIALS  AVERAGED,  EACH  I) 


Figure  B3.  Parameter  and  accuracy  for  the  one-parameter  limited 
distribution . 
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X ■ NUMBER  OF  TEST  LEVELS 
(IOO  TRIALS  AVERAGED,  EACH  I) 


X > NUMBER  OF  TEST  LEVELS 
(100  TRIALS  AVERAGED,  EACH  X) 


Figure  B4  (cont'd). 
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Table  B1 

Analysis  of  Motor  Control  Center  Data  Using 
Exponential  Distribution 


Probability  Function:  F(x)  ■ l-e"ax 


Unit 

Axis 

Ho.  Of 
Levels 

Total 

Tests 

Total 

Failures 

a 

c 

E52MC 

Z 

14 

27 

8 

0.077 

0.371 

i , 

i 

X 

16 

26 

10 

0.161 

0.359 

\ 

> 

Y 

14 

26 

10 

0.104 

0.328 

E089MC 

X 

8 

13 

1 

0.028 

1.004 

: 

Y 

10 

15 

1 

0.020 

1.002 

| E87MC 

Z 

15 

21 

4 

0.064 

0.511 

| 

X 

12 

18 

7 

0.101 

0.388 

l 

f 

Y 

16 

18 

5 

0.064 

0.451 

l E06MC1 

Z 

13 

15 

2 

0.052 

0.711 

E06MC2 

Z 

8 

11 

1 

0.032 

1.000 

X 

8 

11 

1 

0.032 

1.000 

Y 

8 

14 

3 

0.078 

0.657 

there  is  no  direct  relationship,  accuracy  tends  to  Improve  as  the  per- 
centage of  failures  of  total  tests  Increases.  The  lack  of  a more  ob- 
vious direct  relationship  Is  probably  the  result  of  a clustered  and 
generally  poor  selection  of  test  levels. 
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